memory map for kernel mode debugging?

Discussion on reverse-engineering and debugging.
Post Reply
eduardschreder
Posts: 3
Joined: Fri Sep 13, 2013 1:23 pm

memory map for kernel mode debugging?

Post by eduardschreder » Fri Sep 13, 2013 1:26 pm

How can i get a map of the pages that the kernel is composed of? Like the "memory map" window in olly or immunity.

User avatar
EP_X0FF
Global Moderator
Posts: 4872
Joined: Sun Mar 07, 2010 5:35 am
Location: Russian Federation
Contact:

Re: memory map for kernel mode debugging?

Post by EP_X0FF » Fri Sep 13, 2013 1:34 pm

Ring0 - the source of inspiration

eduardschreder
Posts: 3
Joined: Fri Sep 13, 2013 1:23 pm

Re: memory map for kernel mode debugging?

Post by eduardschreder » Fri Sep 13, 2013 2:11 pm

Cool!


But i'm more thinking of a debugger-feature of windbg, ie the memory map of a (remote) debugging target.

eduardschreder
Posts: 3
Joined: Fri Sep 13, 2013 1:23 pm

Re: memory map for kernel mode debugging?

Post by eduardschreder » Mon Sep 16, 2013 9:18 pm

i can get a list of modules with lm, but certainly there has to be a way to get results like the ones obtained by VirtualQuery() in usermode?

Post Reply